meshcentral vulnerabilities
CVEs whose affected-version data names the meshcentral package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
GHSA-c7hr-448w-65pxHigh· 8.3MeshCentral has unsanitized data fields
MeshCentral has unsanitized data fields
▾ Twilightmeshcentral · meshcentralvia GHSA
CVE-2026-66420High· 8.8MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote attackers to hijack authenticated administrator sessions by exploiting an unconditional early return in the C…
MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote attackers to hijack authenticated administrator sessions by exploiting an unconditional early return in the C…
▾ TwilightYlianst · MeshCentralEPSS 0.22%via NVD